Nmap Announce mailing list archives
Idle scanning paper released
From: Fyodor <fyodor () insecure org>
Date: Sun, 15 Sep 2002 23:30:05 -0700
Hello everyone, One of the coolest yet still relatively obscure features of Nmap is the Idle scan (-sI). Not only does this allow for a completely blind portscan (no packets sent to the target from your real IP), but it can even allow you to bypass packet filters in certain circumstances. I think one reason this has not taken off is that documentation is pretty scarce. So I have written an informal paper describing Idle scanning as well as several other exploits based on predictable IPID sequence numbers. It includes real-life examples as well as a section on defending yourself from these techniques. The paper is at http://www.insecure.org/nmap/idlescan.html and feedback is welcome. If you want to test Idle scanning functionality, I recommend Nmap 3.10ALPHA3 (released an hour ago) as it fixes several bugs and improves the algorithm slightly. Cheers, Fyodor -------------------------------------------------- For help using this (nmap-hackers) mailing list, send a blank email to nmap-hackers-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).
Current thread:
- Idle scanning paper released Fyodor (Sep 15)